latestOpenAPI 3.0.2cPanel License2026-08-106251554.3 MB

3da41671c02c

DNS

Domain Management

Enable NSEC3 semantics for domain

This function configures the domain to use Next Secure Record 3 (NSEC3) semantics.

Note:

Only servers that run PowerDNS can use DNSSEC. If you call this function on a server that doesn't use PowerDNS, you will receive an error.

get/set_nsec3_for_domains

Query parameters

domainstring domain required

Example:example.com

The domain for which to enable NSEC3 semantics.

nsec3_iterationsinteger required

Example:7

The number of times that the system re-executes the first resource record hash operation.

nsec3_narrow0 | 1 required

Example:1

Whether NSEC3 will operate in Narrow mode or Inclusive mode.

Note

For information about these modes, read PowerDNS's DNSSEC documentation.

1 - Narrow mode.
0 - Inclusive mode.

nsec3_opt_out0 | 1 required

Whether the system will create records for all delegations.

1 - Create records for all delegations.
0 - Create records only for secure delegations.

Note

Only select 1 if you must create records for all delegations.

nsec3_saltstring required

Example:1a2b3c4d5e6f

The salt value that PowerDNS uses in the hashes.

Note:

For information about salt values, read RFC 5155.

Response

HTTP Request was successful.

Example response

{
  "data": {
    "domains": [
      {
        "domain": "example.com",
        "enabled": 1,
        "error": "Error message."
      }
    ]
  },
  "metadata": {
    "command": "set_nsec3_for_domains",
    "reason": "OK",
    "result": 1,
    "version": 1
  }
}